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1. Introduction 


The NYSE Group equities and options markets offer a suite of client configurable risk controls on the NYSE Pillar trading 
platform. This functionality is currently available to Entering Firms (including NYSE Floor Brokers and Options Market 
Makers) and to equities Clearing Firms provided consent by the Entering Firm. 


Users may view, set, and monitor these controls via the NYSE Pillar Trade Ops Portal (TOP) web UI or via API using the NYSE 
Pillar Binary Gateway (options markets only at this time). 


All risk controls are optional, with the exception that for Options Market Makers, Activity-based risk limits are mandatory 
for order/quote entry (see Activity-based Controls for more detail). 


The suite of risk controls currently available consists of the following: 

















Pre-/ 

Risk Control Post- Trade Equities Markets Options Markets 
Single Order Max Qty Pre-trade Y Y 
Single Order Max Notional Value Pre-trade Y Y 
Gross Credit Pre-trade Y 
(Open + Executed) 
Activity-based Controls Post-trade Y 
Kill Switch N/A Y Y 
e Cancel orders - auction orders; non-auction orders; 

GTC orders 
e Block/Re-enable order entry 




















2. Risk Entities 


A Risk Entity is a business unit for which different risk limits may be set. Applicability per market and risk control type is as 
follows: 




















Single 
Order Single 
Max Order GRMP for 
Equities Options Notional Max Activity- Activity- 
Risk Entity Markets Markets Value Qty based based 
MPID Y Y Y Y Y Y 
MPID + SubID Y Y Y Y Y 
Y - NYSE 
Floor Broker Firm + MPID + SubID only Y 
MPID + MMID Y Y Y Y Y 
Underlying Symbol + MPID Y 
Underlying Symbol + MPID + MMID Y Y Y 
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e Standard Identifiers 


O 


O 


e Optional MPID + SubID Hierarchy 


O 


FIX - 4 characters alphanumeric 


MPIDs and Underlying Symbols - are automatically available as Risk Entities, as applicable per market 
Options Market Maker - risk is attributed separately per MPID + MMID and Underlying Symbol + MPID + 
MMID, and does not roll up to MPID level. SubIDs are not applicable. 


Market Maker Quotes and Market Maker orders (identified as CustomerOrFirm = Market Maker) that are 
entered with the same MMID are aggregated together - any limit set or action taken at that level will 
apply to both. Firms that wish to maintain separate limits for orders and quotes may request different 
MMIDs intended for order entry vs. quoting. 


Entering Firms have the ability to register SubIDs within their MPIDs upon request to NYSE Client 
Relationship Services (CRS) 
Allows firm to segment risk at a lower level than MPID (e.g. different trading desks) 
An MPID level limit includes the aggregated risk calculations of all associated SubIDs 
SublID format 
Binary v2 order message (options markets only at this time) - 4 characters alphanumeric 
Binary v1 order message (equities markets only) - 1 character alphanumeric 


e = “SubIDIndicator” order instruction - in NYSE Pillar Gateway, if a SubID is provided on an order with Self-trade 
Prevention (STP), the default behavior is that the STP identifier becomes the combination of the MPID + SubID. 


For a given order, to use SublD for risk control purposes but ignore it for STP, the “SubIDIndicator” instruction may 
be specified with a value of 1. See the NYSE Pillar Gateway FIX and Binary protocol specifications for more details. 

















o  O/tag not sent = for this order, use SubID for both Pre-Trade Risk Controls and STP (within the MPID) 
o 1=forthis order, use SublID for Risk Controls only (STP at MPID level) 
Order Entry Protocol 
NYSE Pillar Gateway CCG/UTPDirect Gateways 
Risk Entity (all markets) (NYSE only) 
OnBehalfOfCompID (FIX-115); e Entering Firms to provide NYSE Client Relationship Services with 
MPID* MPID field (Binary) an MPID to associate to each existing mnemonic 
e Pillar will use the mnemonic provided on orders in 
OnBehalfOfCompID (Binary/FIX-115) to look up associated MPID 
> SubiD OnBehalfOfSubID (FIX-116); Pillar will treat the mnemonic provided on orders in 
within MPSubID field (Binary) OnBehalfOfCompID (Binary/FIX-115) as the SubID 
MPID 
> MMID SenderSubID (FIX-50); N/A 
within MMID field (Binary) 
MPID; 
options 
markets 
only 











*For orders routed through NYSE Floor Brokers - distinct limits set per Floor Broker Firm (CRD) + MPID + SubID 


Copyright 2022 NYSE Group, Inc. All Rights Reserved. 





3. Risk Users 


Risk Users are firms entitled to view, configure, and/or take action (kill switch, reinstate) on risk controls and Risk Entities. 
Multiple users may set different limits for the same Risk Entity. The most restrictive limit is always enforced. 


e Entering Firm - includes direct members and sponsoring members. Entitlements are further separated for: 
o NYSE Floor Broker - access is limited to Floor Broker CRD + MPID + SublD risk entities. 
o Options Market Maker - access is limited to MPID + MMID and Underlying + MPID + MMID risk entities. 


e Clearing Firm - Equities Markets Only 
o A correspondent clearing firm may be designated as a Risk User by Entering Firm consent via TOP 
o Consent is given per Risk Entity (individual MPID, MPID + SubID, or Floor Broker Firm CRD + MPID + SubID) 
- to view Entering Firm risk controls and/or configure their own Clearing Firm risk controls 


4. Risk Controls 


4.1 Single Order - Maximum Quantity, Maximum Notional Value 
Market Applicability: equities markets; options markets 
Breach Action - triggered when calculation > limit: 


e Equities Markets - single order reject on order arrival 

e Options Markets - single order reject on order arrival, except market orders entered during pre-open/halt are 
subjected to the Maximum Notional Value check after the opening/re-opening auction and cancelled if the leaves 
quantity breaches the limit 


Calculation: 
e Single Order Max Qty - value as specified in OrderQty field of the order 
e Single Order Max Notional Value - calculated as risk reference price x OrderQty. See FAQ for more detail regarding 
reference prices 


Configuration: 
e Single Order Max Qty - limit represented in number of shares (equities markets) or contracts (options markets) 
e Single Order Max Notional Value - limit represented in USD 


Design: implemented in the order path. Each individual order that would exceed the configured limit will be rejected on 


arrival (except for Single Order Max Notional check on options market orders entered during pre-open/halt. See Breach 
Action for more detail) 
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4.2 Gross Credit Open + Executed (equities only) 


Market Applicability: equities markets 


Breach Action: triggered when calculation > limit. Configurable, see below 


Calculation: sum of the USD values of open orders and executed orders across all symbols on a given day, where both buy 
and sell orders are counted as positive values. Orders fully or partially routed to away markets are included in the 
calculations. Calculations are adjusted for execution price and trade busts. For initial phase, trade corrections and 
allocations are not counted. 


Configuration: 


e Limit- represented in USD 
e Breach Action - to be taken automatically upon breach: 
o Notification only 


o Block only - accept cancels; reject order, modify, cancel/replace 
o Cancel Non-Auction orders & Block 


Reinstatement following breach: steps to reinstate the affected Risk Entity are as follows. 


e Increase credit limit or cancel orders to reduce credit usage below the breached limit 
e Reinstatement Approvals - submit via TOP or NYSE Pillar Binary Gateway - Risk Admin session 


e Risk User whose limit was breached - approval required 


e Entering Firm - approval required for breach of both their own and Clearing Firm limits 


o Limit set by NYSE member Customer for trading activity by Floor Broker Firm on behalf of Customer - 
approval required by both Customer and Floor Broker Firm 


e Clearing Firm - approval conditionally required based on Entering Firm consent (see Configure > Consent to 
Clearing Firm, above): 


o Read - approval required for breach of Entering Firm limits only 
o Write - approval required for breach of Clearing Firm limits only 
o Read & Write - approval required according to both Read and Write above 


Design: implemented in a dedicated process outside of the order path. As such, one or multiple marginal orders that would 
cause a breach will be accepted and may execute before the breach action is triggered. Firms may limit this marginal risk by 
utilizing the single order controls 
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4.3 Activity-based Controls (options only) 


Activity-based Controls are available on the options markets - mandatory for Options Market Makers, and optional for all 
other Entering Firms. 


Rolling Transaction/Volume/Percentage limits are configured and breach action applied per Underlying Symbol. GRMP 
keeps count of the number of breaches across all Underlying Symbols and has its own breach action that applies across all 
Underlying Symbols. 


4.3.1 Rolling Transaction/Volume/Percentage - per Underlying Symbol (options only) 


Market Applicability: options markets 
Specifics for Options Market Makers: 


e = Activity-based risk limits - are mandatory for order/quote entry in all underlying symbols - both appointed and 
non-appointed. If an Underlying + MPID + MMID is not configured with an Activity-based limit, all orders/quotes 
with those identifiers will be rejected 


o There is no default limit for Activity-based Controls in Pillar 

o Market Makers must set and maintain their own limits. This includes initial “day 1” setup and on an 
ongoing basis as new underlying symbols are added to the NYSE Arca and NYSE American Options markets 
(intraday or overnight) and/or Market Makers begin or cease trading certain symbols 


e Arbitrage & Intrinsic Value Check Breaches - an order/quote reject due to failing the matching engine Arbitrage 
(buy side) or Intrinsic Value (sell side) price checks will also trigger an automated breach action of Cancel Non- 
Auction Orders & Block in the affected Underlying + MPID + MMID, and increment the GRMP counter. The Market 
Maker must then follow the same steps to reinstate as described for Activity-based Controls 


For more information regarding these price checks, including details on their calculation, see Functional 
Differences — NYSE Group Options Platforms > Arbitrage Check and Intrinsic Value Check 


Breach Action: triggered when calculation > limit. Configurable, see below 


Calculation: 


e Transaction Based - counts the number of order/quote executions that occur over the rolling time period 
e Volume Based - counts the number of order/quote contracts executed over the rolling time period 


e Percentage Based - calculates the number of order/quote contracts executed as a percent of total order/quote 
quantity over the rolling time period. This percentage is calculated for each of the firm’s orders/quotes for the 


given underlying symbol, and these individual percentages are summed and compared against the configured risk 
limit. 


Example of Percentage Based: If a firm has four open orders/quotes for a given underlying symbol on the book, 
and specifies its percentage based risk limit for that underlying symbol to be 100%, its risk level would be 
calculated as follows: 


Order/ Order/ # of Percentage 
Quote Quote Contracts Calculation for the 
ClOrdID Quantity Executed Underlying Symbol 


ClOrdiD-1 P| too | 80H 
ClOrdib-2 
ClOrdib-3 
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ClOrdID-4 150 15 10% 


[Tota | 5o | %5 | 100% 


When the aggregate percentage of contracts executed among all the firm’s orders for this underlying symbol 
during the 100 millisecond time period exceeds the specified limit of 100%, Percentage Based RM would be 
breached, and the remaining open quantity in the four orders would be cancelled by the Exchange. In this case, 
that occurs when 95 contracts are executed 


Configuration: 


e Underlying Symbol - select one, or bulk update across all underlying symbols 
e Type - one of Transaction, Volume, or Percentage per underlying symbol 
e Breach Action - to be taken automatically upon breach: 
o Notification only 
o Block only - accept cancels; reject order, modify, cancel/replace 
o Cancel Non-Auction orders & Block - excludes from cancellation MOO, LOO, GTX, IOC (this covers all Options 
Cross Orders - CUBE, QCC, Customer to Customer), and GTC orders 
e Limits - valid limit values must comply with the following parameters: 


Increment 





Activity-based — 
Rolling Transaction 





e TimeLimit 


100,000 
microseconds 


300,000,000 
microseconds 


1,000 
microseconds 





e CountLimit 


1 transaction 


2,000 transactions 


1 transaction 





Activity-based — 
Rolling Volume 




















100,000 300,000,000 1,000 
e =TimeLimit microseconds microseconds microseconds 
e §=CountLimit 1 contract 500,000 contracts 1 contract 
Activity-based — 
Rolling Percentage 
100,000 300,000,000 1,000 
e =TimeLimit microseconds microseconds microseconds 
e  =PercentageLimit 50% 200,000% 1% 














IOC Attribution - controls whether IOC and FOK orders will be included/excluded from calculations 


o Include 
o Exclude 





An intraday update to any of the above configurations will end the current rolling timer, reset calculations to 0, and start a 
new time window taking into account execution activity that occurs after the reset only. 


Reinstatement following breach: the Risk User (Entering Firm/Options Market Maker) whose limit was breached must 
submit Reinstatement Approval via TOP or NYSE Pillar Binary Gateway for the affected Risk Entity (Underlying Symbol + 
MPID or Underlying Symbol + MPID + MMID) 
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Design: implemented in the execution path. Pillar will evaluate for a breach at the end of each transaction and apply the 
breach action if applicable, before processing the next transaction. A single transaction may include one or multiple 
executions in excess of the configured limit 


4.3.2 | Global Risk Mitigation Protection (GRMP) - across all Underlying Symbols (options only) 


Market Applicability: options markets 


Breach Action: triggered when calculation > limit. Cancel Non-Auction Orders & Block, across ALL underlying symbols. 
Accept cancels; reject order, modify, cancel/replace. Excludes from cancellation MOO, LOO, GTX, IOC (this covers all 
Options Cross Orders - CUBE, QCC, Customer to Customer), and GTC orders 


Configuration: 


e Limits - valid limit values must comply with the following parameters: 


Increment 





Activity-based — 
Rolling Transaction/Volume/ Percentage 
Global Risk Mitigation Protection (GRMP) 




















100,000 300,000,000 1,000 
TimeLimit microseconds microseconds microseconds 
25 100 1 
underlying-level underlying-level underlying-level 
CountLimit breaches breaches breach 








e Note: all Risk Entities are preconfigured with the minimum GRMP limit of 25 underlying-level breaches over 
100,000 microseconds 


Calculation: Pillar keeps an aggregate counter of the number of Rolling Transaction, Volume, and/or Percentage breaches 
that occur for the MPID or MPID + MMID across all underlying symbols, over the course of the GRMP rolling time window 


Reinstatement following breach: steps to reinstate the affected Risk Entity are as follows. 


e The Risk User (Entering Firm/Options Market Maker) whose limit was breached must submit a request for 
reinstatement by email to the Trade Operations Desk at tradingox@nyse.com (this step cannot be done via 
TOP or NYSE Pillar Binary Gateway) 


e Once the Trade Operations Desk has manually approved GRMP reinstatement on behalf of the Risk User, the 
MPID or MPID + MMID will be unblocked for order/quote entry in all underlying symbols except those that 
specifically triggered the GRMP breach, which the Risk User must then individually approve for reinstatement 


e Design: implemented in the execution path. Pillar will evaluate for a breach at the end of each transaction and apply 
the breach action if applicable, before processing the next transaction. A single transaction may include one or multiple 
executions in excess of the configured limit 
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5. Tools & Entitlements 


Pillar risk controls are accessible via the following tools. The same functionality is available in both tools, with the exception 
that Entering Firms may only configure email addresses and update consent to Clearing Firm settings via TOP. 


5.1 NYSE Pillar Trade Ops Portal 


Market Applicability: equities markets; options markets 


NYSE Pillar Trade Ops Portal (TOP) is a web-based user interface. 


e The risk module is available in the existing TOP UI 
e Users should fill out and submit TOP request forms to provision access to the new module: 
o NYSE Pillar Trade Ops Portal - User Request and Authorization 
o NYSE Pillar SubID Request Form 
e A firm (Risk User) may have different levels of entitlement for individual user logins. See Entitlements table below 
for more information 
o View Only 
o Risk Desk - view and configure 
o Risk Officer - view, configure, action (kill switch, reinstate) 


5.2 NYSE Pillar Binary Gateway 


Market Applicability: options markets 


e = NYSE Pillar Binary Gateway 
o A dedicated “Risk Admin” session allows API interaction with risk controls, and excludes order/quote 
entry entitlements 
Each “Options Market Maker” session supports both risk controls and order/quote entry 
Messaging in binary protocol, but applies to both FIX and Binary order flow based on Risk Entity 
See NYSE Pillar Options Binary Gateway Protocol Specification 
= Risk Limit Update Request 





= Risk Action Request 
=a Risk Control Acknowledgement 
= Risk Control Alert 


e Risk Admin session configuration 
o Each Risk Admin session is configured as a single Risk User type - Entering Firm or Options Market Maker 
firm 
o Entitlement is Risk Officer - view, configure, action (kill switch, reinstate). See Entitlements table below for 
more information 
o Users should fill out and submit gateway session request forms to provision Risk Admin sessions: 


= Session Request Form - Certification Environment 
= Session Request Form - Production 
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5.3 Entitlements 


Entitlement Capabilities 


Ability to view risk controls. 

View e Configurations - view risk control limits and related configurations 

e Gross Credit - monitor credit usage 

e Risk Control configurations 
o Configure risk control limits and other associated properties 
o Intraday updates to controls are supported. 





e Consent to Clearing Firm - Equities Markets Only - for each Risk Entity, the Entering Firm may 
optionally consent to providing a correspondent clearing firm with one of the following 
entitlements: 

o Read - view, receive notifications, approve reinstatement for Entering Firm limits only 

o Write - set, receive notifications, approve reinstatement for their own Clearing Firm 
limits only 

o Read & Write - superset of Read and Write capabilities above 

Configure 

The Entering Firm may change the consent during Pillar operational hours only. Upon 

acceptance of the change, Pillar will send the Clearing Firm an email notification reflecting the 

new configuration. 


e Email Address - for each Risk Entity, Entering Firm and Clearing Firm may configure an email 
address to receive the following notifications 

Gross Credit - notifications sent at 50/75/90% and breach of limit 

Activity-based Risk Controls - notification sent upon breach of limit 


O 


o Kill Switch - notification upon block/unblock 
o Email Address & Consent to Clearing Changes - notification upon changes to email 
address and Consent to Clearing Firm settings 
Take manual action on a Risk Entity’s open orders and/or ability to enter new orders: 





e Block new order entry 

e Unblock 

e Cancel Non-Auction Orders (except GTC) 
e Cancel Auction Orders 

e Cancel GTC Orders 


Kill Switch Action 


Following a Kill Switch - Block action, the affected Risk Entity may be unblocked only by the same Risk 
User (firm) that applied the block. 

Following a credit breach, approve reinstatement for the affected Risk Entity to resume accepting 
incoming orders. 





Reinstate 
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6. Screenshots: NYSE Pillar Trade Ops Portal (TOP) 


The following details screens available in TOP to enable Risk Controls applied at the Pillar Matching Engine. Once entitled 
for these features, they can be accessed via tabs available in TOP (highlighted below). 


Equities Markets: 
lililii 
NYSE 
AMERICAN CHICAGO NYSE NATIONAL 


DASHBOARDS FIRM INFORMATION MARKET DATA RESOURCES VOLUMES 


Overview My Firm MPIDs Auctions Documents & Links Broker Rank 


My Sessions Quote Metrics CADV 
Net Notional Risk Monitor Liquidity Metrics 


| Pre Trade Risk Monitor Search 
-Pre Trade Risk Settings Trade Count 


Trades 





Options Markets: 


CHICAGO NYSE NATIONAL 


DASHBOARDS FIRM INFORMATION REPORTS SETTINGS 
Overview Live Orders Activity Report EOD Processing 
My Firm MPIDs 


. Sessions 


Trade Summary 





Equities Markets: the screenshots within this document assume an Entering Firm user with Risk Officer access and use the 
dummy Risk Entities established in the table below: 


Risk Entity Entering Firm CRD Clearing Firm CRD 
PILR 999999999 123123 


PILR+1 (subID of PILR) 999999999 123123 
PILX 999999999 123123 





Options Markets: the screenshots within this document assume an Options Market Maker user with Risk Officer access. 
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Risk Monitor 


Displays current credit calculations inside the Pillar Matching Engine and supports the ability for user to take Kill Switch or 
Reinstatement action on Risk Entities. The default view is that all Risk Entities will be collapsed. 


The displays below show the current state of each Risk Entity in the Pillar Matching Engine. The red risk entities are 
indicated as blocked due to breach action. 


Equities Markets: 


PRE TRADE RISK MONITOR 


Risk User MPID View My Limits 
NYSE Pillar Test Firm - - { 


SEARCH RESET 


Risk Entity Block By Breach Block By Kill Switch 


~ 
| Kie swiTCH | SWITCH 
KILL SWITCH 








Options Markets: 


RISK MONITOR 


View My Limits 


Block By Breach 





Risk Entities can be expanded to show the limits being enforced and calculated in the Pillar Matching Engine for a given Risk 
Entity. 
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Equities Markets: in the expanded view below, the Entering Firm gross credit limit for PILR is in excess of 100%, while other 
limits for PILR and the limits for other Risk Entities are not: 


PRE TRADE RISK MONITOR 


Risk User MPID View My Limits 
NYSE Pillar Test Firm - - {v 


SEARCH RESET 


Risk Entity Block By Breach Block By Kill Switch 


PILR [s KILL SWITCH APPROVE 


Risk User CRD Risk Control Breach Action Gross - USD Gross - Usage ( Open - USD Executed - USD Auc Open - USD 
999999999 entering s notify ) X 110.000 % ),0C 55,000,000 

entering block 00,0 0 110.000 % 

clearing cancel 1,000,000,000 110,000,000 55,000,000 55,000,000 

clearing block 1,000,000,000 110,000,000 55,000,000 55,000,000 27,500,000 


clearing notify 1,000,000,000 110,000,000 55,000,000 55,000,000 27,500,000 


v PIRH KILL SWITCH 


Risk User CRD | Risk Control Breach Action Gross - USD Usage (. Open - USD Executed - USD Auc Open - USD 
999999999 entering Gross block 55,000,000 45,000,000 £ % 3,000,006 36,000,000 250,006 


999999999 entering S notify 55,000,000 45,000,000 9,000,00c 36,000,000 2,250,000 





Risk User CRD Type Risk Control Breach Action Limit Gross - USD Usage ( Open - USD Executed - USD Auc Open - USD 
entering Gross block 1,000,000,000 375,000,000 38.000 % 93,750,000 281,250,000 84,375,000 


entering Gross notify 1,000,000,000 375,000,000 38.000 % 93,750,000 281,250,000 84,375,000 





Options Markets: in the expanded view below, the Options Market Maker Global Risk Mitigation Protection (GRMP) limit 
for OMMA+MMOMMA is in effect but not currently breached. 


AMERICAN ARCA CHICAGO 


RISK MONITOR 


Risk User View My Limits 
omma 


= 


Risk Entity aol tate Block By Breach Block By Kill Switch 
onma 


S OMMA+MMOMMA 


Fisk User CRD Risk Controt Breach Action Time Window ` 10C 
997766777 Nar er anme Block 100,000 


997766777 ~ v SAMP Cance 100,000 





The button (based on entitlement) allows the following actions on a given Risk Entity. 


Equities Markets: Options Markets: 


+PILR+ +OMMA+MMOMMA 


Block 
Block O 

Unblock 
© Unblock 


© Cancel Non-Auction Orders 
© Cancel Non-Auction Orders 


O Cancel Auction Orders 


© Cancel Auction Orders 


O Cancel GTC Orders 


RESET 
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When a Risk Entity is blocked by breach (utilization of 100% for a gross credit or activity-based limit), an button will 
appear on the grid (based on entitlement) to allow users to take steps to reinstate the impacted Risk Entity. 


Clicking on allows a user to take action to approve reinstatement. 


Equities Markets: the user can also see which other Risk User types (such as Clearing Firm) would need to approve 
reinstatement, and whether or not they have done so. 


Options Markets: only the Entering Firm or Market Maker, as applicable, needs to approve reinstatement following an 
activity-based breach for a given underlying symbol. Following a Global Risk Mitigation Protection (GRMP) breach, only the 
Trade Operations Desk may approve reinstatement. 


Workflow to approve is below (specific example shown is for equities markets): 


+PILR+ 


+PILR+ 


Risk User Type Status 
Risk User Type Status CRD 
CRD 


999999999 Entering Pending 
999999999 Entering Pending 


APPROVE 


123123 Clearing Pent Enter ‘APPROVE’ To Confirm 
123123 Clearing Pending 


+PILR+ 
+PILR+ 


Risk User Type Status 
Risk User Type Status CRD 
CRD 


999999999 Entering approved 


999999999 Entering Pending APPROVE 


APPROVE 123123 Clearing Penc 
123123 Clearing Pent Enter 'APPROVE' To Confirm 


© Your request was successful! 
APPROVE CONFIRM 





Once approved, the icon on the Risk Monitor becomes a icon and the user will only be able to see status of 


the entity when clicking on the | — Fi icon 


+PILR+ 


Risk User Type Status 
CRD 


999999999 Entering Approved 


123123 Clearing Pending 





Copyright 2022 NYSE Group, Inc. All Rights Reserved. 16 


Risk Settings 


Allows users to view and update risk settings. The default view is with all Risk Entities collapsed. 


Equities Markets: 


PRE TRADE RISK SETTINGS 


Risk User MPID View My Settings 
NYSE Pillar Test Firm Y 


SEARCH RESET 


Risk Entity 


ARRB 





PILR 











> 
> 
> PILX 
> 


PILR+1 





Options Markets: 


RISK SETTINGS 


Risk User View My Limits Symbol 


TBOX Test Firm {v 


SEARCH RESET 
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Users can click on Risk Entities to expand and show the settings for a given Risk Entity, as displayed below. 


Equities Markets: 


PRE TRADE RISK SETTINGS 


Risk User MPID View My Settings 
NYSE Pillar Test Firm v 


Risk Entity 








Risk User CRD Type Breach Action Limit Email 
123123 Clearing Gross - Block 1,000,000,000 —clearing-firm@top.com 
Gross - Cancel 1,000,000,000 
Gross - Notify 1,000,000,000 
999999999 Entering Gross - Block 100,000,000 = member-firm@top.com 


Gross - Notify 100,000,000 


> PILR+1 





Options Markets: 


LOGOUT 


RISK SETTINGS 


Risk User View My Limits Symbol 
TBOX Test Firm 


Risk Entity 











Clicking the Y button allows a user to update/establish settings for a Risk Entity. 


Equities Markets: 


RISK ENTITY / PILR 
SETTINGS CONSEN 


Entering Firm: 999999999 


Action Single Order - Max Qty 


O Notify 
© Block Single Order - Max Notional 


500,000 


© Cancel & Block 


Notification Email 


00,000,000 member-firm@top.co 
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Entering Firm users will have access to another tab, where they can grant/update consent for Clearing Firm users (based on 
entitlement). The submit icon becomes available when the consent checkbox is clicked: 


RISK ENTITY / PILR 


TIN CONSENT 


Entering Firm: 999999999 Clearing Firm: 123123 


Entering Firm Consents To Cleating Firm Having The Following Entitlements 





Options Markets: 


RISK ENTITY / 


SETTINGS 


Market Maker Firm 


Time Window (us) 
100,000 


Single Order - Max Qty Single Order - Max Notional 


Notification Email 


Po 
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When updating an Activity-based (Transaction, Volume, or Percentage) limit, the popup dialog will apply the 
update to the individually selected underlying symbol by default, but also provides the option of applying the 
same settings to all underlying symbols by checking the box: 


RISK ENTITY / 


SETTINGS 


Market Maker Firm 


Action 10C 


© Notify O Include 
Type O Block © Exclude 


Transaction © Cancel & Block 


Time Window (us) 


Notification Email 


Apply To ALL Symbols go 





Copyright 2022 NYSE Group, Inc. All Rights Reserved. 20 


7. Frequently Asked Questions (FAQ) 


Coverage 


1. 


Which NYSE Group exchanges offer risk controls? Is risk aggregated across the exchanges? 


Risk controls are independently offered and separately calculated by each NYSE Group equities and options 
market. 


2. Do the risk controls apply to orders from all gateway protocols? 
Yes, risk controls may be calculated for orders originating from both NYSE Pillar (“native”) Gateway and legacy 
NYSE CCG/UTPDirect. See Risk Entities for setup details. 

3. What enhancements are planned for the future? 
Future phases will introduce options Clearing Firm users, the equities API, and additional risk controls commonly 
requested by members for their own use as well as for use in sponsored access arrangements. Details and 
timelines will be communicated as these plans progress. 

Risk Entities 

4. What is a Risk Entity, and which Risk Entities are available to me? 
A Risk Entity is a business unit for which risk limits may be set. A risk limit applies to all order flow with the 
corresponding Risk Entity across all gateway sessions on a given market. 
By default in the TOP UI or Pillar Binary Gateway, Entering Firms have access to all their MPIDs. Options Market 
Makers have access to all MMIDs associated with a given MPID. 
Options Entering Firms/Market Makers also have access to all underlying symbols traded on the applicable market, 
for configuring Activity-based risk limits. 
In addition, Entering Firms may choose to register SubIDs within their MPIDs upon request to NYSE Client 
Relationship Services, after which any such registered MPID + SubID combinations will become available in TOP 
and NYSE Pillar Binary Gateway. See Functional Overview #4(a). 
Equities Markets Only - Entering Firms may additionally consent to providing correspondent Clearing Firms with 
pre-trade risk entitlements for those Risk Entities that they clear. See Entitlements > Configure > Consent to 
Clearing Firm. 

5. What are SubIDs? Do I need them, and how might they be useful? 
SublD is available via a customer-defined field on orders. It is not required, but may be used to set risk limits at a 
more granular level than MPID. For example, a firm may want to set different risk limits for different trading 
desks/strategies sharing the same MPID. 
SublIDs are supported for all Entering Firms except Options Market Makers, who are identified by their MMIDs. 

6. How do orders routed to NYSE Floor Brokers fit into the risk controls structure? 


e Risk Entity & Entitlements - Floor Brokers may set limits on behalf of their customers’ MPID + 
SubID/mnemonic 
o Risk Entity is represented as Floor Broker CRD + MPID + SubID/mnemonic 
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o Customers are able to view and will receive notifications for any limits set by the Broker 
o Customers may also set their own limits at this level for the orders they route to each Floor 
Broker Firm, if desired 


e Reinstatement - following a breach that involves the “Block” action, reinstatement approvals are required 
as follows: 
o If Entering Firm owns the limit - both Entering Firm and Floor Broker need to approve 
reinstatement 
o If Floor Broker owns the limit - only the Floor Broker needs to approve reinstatement 


e Hierarchy - Entering Firm limits at the MPID or MPID + SubID level apply both to orders routed directly to 
the matching engine, as well as orders routed to NYSE Floor Brokers and subsequently routed to the 
matching engine 


7. How do Options Market Makers fit into the risk controls structure? 


e Risk Entity & Entitlements - Market Makers may set limits per MPID + MMID and per Underlying + MPID + 
MMID. See Risk Entities for more details. 


In the case where an Entering Firm and Market Maker share a given MPID, entitlements are as follows: 
o The Entering Firm associated with the MPID is able to view and will receive unsolicited 
notifications and alerts for any risk controls configured by the Market Maker 
o However, the Entering Firm may not set limits or take any action at the Market Maker level such 
as invoke kill switch, approve reinstatement following an activity-based breach, query Market 
Maker limits on demand via API, etc. Those entitlements are reserved for the Market Maker 


e Reinstatement - following a breach that involves the “Block” action, reinstatement approval is required 
from the Market Maker only 


e Hierarchy - none. There is no hierarchy for Market Maker risk calculations (MMID calculations do not roll 
up to MPID level calculations), and SubIDs are not applicable 


Configuration 


8. Fora given Risk Entity and risk control, if one Risk User sets a lower risk limit compared to another Risk User, 
which one will be enforced? 


Pillar enforces all risk limits independently, so the most restrictive limit will always be enforced. 
Example - for MPID = ABCD, if the Clearing Firm sets a credit limit of $1 million with the breach action “Block,” and 
the Entering Firm sets a credit limit of $1.2 million with the action “Cancel and Block,” , the first order/execution 
for ABCD to breach 1M will block new order entry for ABCD. 

9. What is the meaning of risk limit values set to 0 and not set at all? 
O is the most restrictive limit ($0, O shares/contracts, 0 Transactions, etc.). 
Not setting a limit means unlimited order entry/trading (subject to limits otherwise enforced by Exchange trading 
rules). A limit not set is represented in the TOP UI as a blank field, and in the NYSE Pillar Binary Gateway as limit = - 
1 or RiskControlActivation field = 0 (off). 


10. Can risk limits be updated intraday? Do the settings persist overnight? 


Yes, risk limits can be updated intraday and persist from end of day to the next start of day. 
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Risk Reference Price 


11. 


What reference price is used in calculating the Single Order Notional and Gross Credit value of an open order? 


The risk reference price is assigned to an order on arrival, except for Single Order Max Notional check on options 
market orders entered during pre-open/halt. See Single Order - Maximum Notional Value Breach Action for more 
detail on this scenario. 


The reference price is generally the limit price of the order, except as provided below, and is updated upon 
acceptance of any subsequent Modify or Cancel/Replace Requests. 


e Equities Markets - for Opening/Closing D Orders (NYSE Floor Broker), Market orders, and Market Pegged 
orders entered during the Core trading session, Pillar will use the consolidated last sale. For such orders 
entered during the Early or Late trading sessions, Pillar will use the prior day official closing price 


e Options Markets - for Market orders, Pillar will use the contra-side Market Collar (for Buy orders - upper 
market collar, for Sell orders - lower market collar) 


General Processing 


12. 


13. 


14. 


15. 


Will a Risk User that chooses to set limits for these risk controls experience more latency compared to a Risk 
User that does not set limits? 


No. All orders on the Exchange will pass through the risk checks regardless of whether limits are configured. As 
such, an Entering Firm that chooses not to set limits nor permit its Clearing Firm to set limits on its behalf will not 
achieve any latency advantage with respect to its trading activity on the Exchange. In addition, any latency applied 
to all participants as a result of this implementation is de minimis. 


What executions count toward Activity-based controls? 


Executions for all single leg and complex order types are counted, with a client configuration that controls whether 
to include/exclude IOC and FOK executions. Both auction and continuous trading executions are counted. 


For the Rolling Transaction calculation, each leg of a complex order is counted as 1 transaction. 


Is the automated breach action to “Cancel Non-Auction orders & Block” subject to Exchange rules restricting 
order cancellation? What about the Kill Switch commands to “Cancel Auction Orders” and “Cancel Non-Auction 
Orders”? 


Yes, all existing cancel restrictions defined in Exchange rules and systemically enforced today will continue to be 
enforced upon a credit breach or Kill Switch event by excluding certain orders from cancellation as necessary. For 
example, upon a Kill Switch command to “Cancel Auction Orders” after a MOO/LOO Cancellation Cutoff time, 
MOC/LOC orders will be cancelled but MOO/LOO orders will remain open. 


After updating Risk Entity settings, approving reinstatement, or initiating a Kill Switch action, how do | verify 
whether it was processed? 


An update has been processed once it appears in TOP Risk Monitor or a confirmation message is sent to the firm 
via the NYSE Pillar Binary Gateway as specified below. 


Via TOP - following each of these commands, it is advised that the user always check the TOP Risk Monitor page 
before taking any further action, regardless of whether TOP responded with an acknowledgement or error 
message. Processing may be verified for each applicable Risk Entity via Risk Monitor as follows: 
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- Update Risk Entity settings - verify the new settings appear as rows 

- Approve reinstatement - verify the “Approve” icon disappears. If approvals from other Risk Users are required 
and still pending, you may also click the “Status” icon and verify that your firm is listed with a Status of 
“Approved” 

- Kill Switch block - verify an indicator appears in the “Block by Kill Switch” column 

- Kill Switch un-block - verify the indicator disappears in in the “Block by Kill Switch” column 

- Kill Switch cancel non-auction orders - verify the “All Orders” calculation is updated to reflect the cancelled 
orders (calculations currently available for equities markets only) 

- Kill Switch cancel auction orders - verify the “Auc Orders” calculation is updated to reflect the cancelled 
orders (calculations currently available for equities markets only) 


Via NYSE Pillar Binary Gateway - processing may be verified for each applicable Risk Entity as follows: 


- Query Risk Entity - to confirm updated settings, reinstatement approval, and Kill Switch block/un-block status, 
send a Risk Action Request with RiskActionType = 1 (Query Risk Entity). 

- Kill Switch Order Cancellation - UROUTs for the cancelled orders/quotes will be sent to the corresponding 
order/Options Market Maker Quote entry sessions with R226: Risk - Kill Switch. The UROUTs serve as 
confirmation that the kill switch action was processed. 


Breach and Kill Switch 
16. How will | know if a reject or UROUT is the result of an automated risk breach or Kill Switch action? 


The following new reason codes will be sent on reject and UROUT messages via both NYSE Pillar Gateways and 
legacy NYSE CCG/UTPDirect: 


R223: Risk - Single Ord Max Qty 
R224: Risk - Single Ord Max Notional 
R225: Risk - Gross Credit Breach 
R226: Risk - Kill Switch 

R284: Risk - Roll Transact Breach 
R285: Risk - Roll Vol Breach 

R286: Risk - Roll Pct Breach 

R287: Risk - Roll GRMP Breach 

R288: Risk - MM Arbitrage Breach 
R289: Risk - MM Intrinsic Breach 


17. Following a Credit breach, what process should | follow in approving reinstatement? 
First, you should cancel open orders and/or increase the breached credit limit(s) such that the current credit 
calculation is lower than the credit limit(s) that triggered the breach. Then, each Risk User whose reinstatement 


approval is required should approve reinstatement. See Gross Credit > Reinstatement following breach. 


18. Which type of consent given by an Entering Firm to their correspondent Clearing Firm will allow the Clearing 
Firm to use Kill Switch actions? 


Write consent includes the Kill Switch capabilities for the Clearing Firm. 


19. For a given Risk Entity, if one Risk User commits the Kill Switch-Block command, can a different Risk User 
commit the Kill Switch-Unblock command? 
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No, Unblock must be performed by the same Risk User who committed the Block. For example, if the Clearing Firm 
blocks a Risk Entity, the Entering Firm will not be able to Unblock it; only the Clearing Firm may do so. 


Email Notifications 

20. What types of email notifications will | receive as a risk control user? 
Email notifications will be sent for Gross Credit thresholds/breach and Activity-based breach; when reinstatement 
is processed for a previously breached Risk Entity; Kill Switch block/unblock events, changes to the email address 
configuration, and changes in consent given to a Clearing Firm by Entering Firm. 

21. How many email addresses may be configured to receive email notifications? 
One email address per Risk Entity, per Risk User (Entering Firm, NYSE Floor Broker Firm, Options Market Maker, 
Clearing Firm). It is recommended that Risk Users utilize a distribution list email address in the event that multiple 
recipients within the firm are interested in receiving the notifications. 


22. What information will be provided in the Gross Credit and Activity-based threshold/breach notifications? 


A separate email message will be generated for each underlying action (notify; block; cancel, as applicable) as 


follows. 
e Gross Credit calculation exceeds 50/75/90% and breach (exceeds 100%) of the configured limit. For each 
percentage: 
o Notifications Only - a single “notify” email is sent 
o Block Only - a single “block” email is sent 
o Cancel Non-Auction Orders & Block - two emails are sent, one for “cancel” and the other for 
“block” 
e Activity-based calculation breaches (exceeds 100%) of the configured limit. For Breach Action configured 


as: 
o Notifications Only - a single “notify” email is sent 

Block Only - a single “block” email is sent 

o Cancel Non-Auction Orders & Block - two emails are sent, one for “cancel” and the other for 
“block” 


O 


The following data elements will be included in the email: 
e Risk Entity - that met the threshold/breach condition 
e CRD Number, Type (Entering/Clearing/Floor Broker/Options Market Maker) and Text Name of the Risk 
User - that configured the Gross Credit or Activity-based limit for the affected Risk Entity 
e Risk Control - the limit value and action (notify; block; cancel) of the Gross Credit or Activity-based control 
configured for the affected Risk Entity 
e Notification Type - Thresholds (> 50%; > 75%; > 90%); Breach (> 100%) 


Customer Outputs 


23. Will I be able to receive output files reflecting my risk control settings and activity? 


Yes, a set of files called Risk Outputs are available for use by Entering Firms, Options Market Makers, and Clearing 
Firms. Upon request, the outputs will be made available for secure pick-up via Managed File Transfer (MFT) on the 
same lines as existing outputs. 


Firms may subscribe to outputs by submitting a request to NYSE-CustomerOutput@theice.com. 
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8. Document Version History 


Date 


February 17, 2022 


2.4 


Doc. Version # | Change Summary 


FAQs - updated #22. Gross Credit email notifications for the Cancel & 
Block and Block Only breach actions are being streamlined to 
eliminate the duplicative “Notify” email message. For a Gross Credit 
limit configured with a breach action of Cancel & Block, two emails 
will be sent (one for cancel and one for block) instead of three emails. 
For Block Only, one email will be sent instead of two. 





December 16, 2021 


2.3 


Risk Entities section - Market Maker Quotes and Market Maker orders 
(identified as CustomerOrFirm = Market Maker) that are entered with 
the same MMID are aggregated together. 


NYSE Pillar Binary Gateway section - added support for risk controls 
via Options Market Maker session. 


FAQs - updated #7, 15, 18. 





November 3, 2021 


2.2 


Screenshots: NYSE Pillar Trade Ops Portal - added images for options 
markets. 





September 24, 2021 


2.1 


Clarified “Breach Action” for all Risk Controls - breach is triggered 
when calculation > limit. 


Added detail to FAQ #7 regarding Options Market Maker risk entities 
and associated entitlements. 


Added detail to FAQ #22 regarding the number of threshold/breach 
notifications that will be sent for each risk control type. 





May 19, 2021 


2.0 


Added support for NYSE Group options markets: 

- Updated Single Order Max Quantity and Single Order Max 
Notional Value with options market details 

- Activity-based Risk Controls 

- Risk Controls API - NYSE Pillar Binary Gateway Risk Admin 
session 

- Risk Users and their associated Risk Entities - Entering 
Firm, Options Market Maker 





May 11, 2020 








1.0 





Initial version of the document, covering Pillar Pre-trade Risk Controls 
for NYSE Group equities markets: 

- Single Order Maximum Quantity 

- Single Order Maximum Notional Value 
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Gross Credit (Open + Executed) 
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